Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Qaz8248xuqs6d98DxO8Eu1r2aRg.roa
File: Qaz8248xuqs6d98DxO8Eu1r2aRg.roa (raw, json)
Hash identifier: 6hG0sbw8VHHMdjXe6EpitApLwqGma2tOy8I8GkqVCkY=
Subject key identifier: 41:AC:FC:DB:8F:31:BA:AB:3A:77:DF:03:C4:EF:04:BB:5A:F6:69:18
Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial: 018AD22AAE6AD400037DC8F0A00C224A5FDF
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Qaz8248xuqs6d98DxO8Eu1r2aRg.roa
Signing time: Tue 26 Sep 2023 15:45:27 +0000
ROA not before: Tue 26 Sep 2023 15:45:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198912
IP address blocks: 57.191.0.0/21 maxlen: 24
57.191.224.0/19 maxlen: 24
57.191.127.0/24 maxlen: 24
57.191.192.0/19 maxlen: 24
2a0a:90c2::/36 maxlen: 36
2a0a:90c2:1000::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 06 Dec 2023 15:14:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d2:2a:ae:6a:d4:00:03:7d:c8:f0:a0:0c:22:4a:5f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Validity
Not Before: Sep 26 15:45:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41acfcdb8f31baab3a77df03c4ef04bb5af66918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:78:dd:62:0e:b0:89:2a:6a:3a:80:f9:2d:bf:
a5:bd:35:5c:e0:ae:48:f5:3d:2b:51:d5:19:00:a3:
4e:2e:74:4d:fe:71:ca:c5:54:ba:6b:89:1b:8b:da:
f2:7a:70:0a:1e:61:08:c8:f4:ec:a8:e4:ee:61:7c:
d6:1a:6e:1c:2b:75:8f:4b:ad:f1:00:11:09:86:af:
fa:bf:1d:50:fe:01:fc:b9:0d:d9:62:87:09:e8:b5:
7a:56:f9:a4:1b:8e:f9:96:05:4d:b0:96:3e:e4:89:
78:36:10:45:3d:16:28:dd:48:b8:19:5e:24:d5:7a:
92:ca:c0:b0:02:96:c7:b9:b2:de:49:14:24:ae:27:
42:5d:1f:9a:d9:27:94:b4:ac:2b:bf:cd:37:91:5e:
61:34:f7:e2:3a:82:f4:fb:c7:9d:37:ed:7b:d0:5c:
96:8c:f9:2d:43:9e:0a:86:07:dc:63:d2:26:4a:9e:
31:2d:85:77:71:ea:06:73:3e:47:03:bd:5f:5d:b3:
77:fc:0b:39:43:23:11:47:b0:86:fb:dd:8f:42:11:
52:2c:61:e7:38:5a:fc:52:56:26:6c:44:fd:f9:a1:
b2:ec:f6:3b:cd:08:29:a7:01:b5:ed:dd:1a:7c:4f:
e9:de:0c:43:46:e7:ee:09:d0:93:f9:3d:db:72:e2:
e8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AC:FC:DB:8F:31:BA:AB:3A:77:DF:03:C4:EF:04:BB:5A:F6:69:18
X509v3 Authority Key Identifier:
keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Qaz8248xuqs6d98DxO8Eu1r2aRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.191.0.0/21
57.191.127.0/24
57.191.192.0/18
IPv6:
2a0a:90c2::/35
Signature Algorithm: sha256WithRSAEncryption
c6:56:0b:b4:9b:de:d7:eb:cd:e1:69:4d:07:b8:d9:34:c6:9e:
d9:0a:17:63:89:05:cd:63:b9:db:63:df:ff:04:0e:4e:c5:dd:
8b:a0:65:da:61:95:d2:01:e5:c8:bc:4e:67:0b:af:dc:f1:8c:
4a:d0:b4:31:27:8c:1e:a1:88:91:1d:35:b3:7b:5b:f0:97:11:
74:03:e3:75:aa:34:a9:fb:18:dc:60:55:25:1a:79:c3:57:83:
df:88:18:2b:2c:35:95:2c:8d:20:b8:d8:9b:f6:61:23:0d:b6:
b9:07:74:f0:57:38:85:88:02:6f:42:f4:c0:fa:da:59:d4:38:
f5:bd:0f:eb:1b:5a:c5:32:91:9d:81:3f:06:5b:98:6d:80:60:
ee:cb:e9:bc:bb:4a:78:1f:b9:88:fd:27:06:bd:f2:ea:b8:32:
47:ce:7e:b4:74:8c:3e:4f:ba:a2:ae:a7:07:9f:11:36:32:35:
b9:3a:29:f7:2b:65:61:42:b1:5e:46:f1:eb:d5:e2:43:ff:82:
9b:a9:96:89:b6:55:5b:14:0e:aa:1f:27:8a:2b:c4:94:f2:ba:
f0:f2:c1:51:4b:b6:29:e6:ec:aa:73:32:be:dd:c4:f9:5c:98:
a8:2b:7c:79:38:a1:be:e5:cf:88:a1:74:9e:b9:e9:6a:7a:16:
1f:5a:20:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:48 2024 by rpki-client on console-ams.rpki-client.org